Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/0352e3a8-bbe0-3d6c-8444-0e0e4db812d4.roa
File:                     0352e3a8-bbe0-3d6c-8444-0e0e4db812d4.roa (raw, json)
Hash identifier:          rGRSVJpOJTxfxjKp4x/g7RlvzQw+Zi2kmi17LBGFVWs=
Subject key identifier:   AA:6F:59:F9:49:6B:03:0A:8A:1E:24:B4:54:D1:3C:73:4C:1A:B8:29
Certificate issuer:       /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial:       010D0C9F4328584C9EFC67B2DCBE64A98522A580
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/0352e3a8-bbe0-3d6c-8444-0e0e4db812d4.roa
Signing time:             Fri 23 Jan 2026 14:00:38 +0000
ROA not before:           Fri 23 Jan 2026 14:00:38 +0000
ROA not after:            Thu 23 Apr 2026 13:00:38 +0000
asID:                     14618
IP address blocks:        142.214.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:9e:fc:67:b2:dc:be:64:a9:85:22:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
        Validity
            Not Before: Jan 23 14:00:38 2026 GMT
            Not After : Apr 23 13:00:38 2026 GMT
        Subject: CN=4cc8b388-475b-406e-a549-1fd7a59cb9c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:17:24:dd:a1:21:4b:45:b9:87:14:0b:54:1a:
                    61:b4:0e:33:d0:d6:79:23:14:8b:cc:6d:c9:f6:a6:
                    a7:e8:4b:e0:9c:e4:dc:65:f3:5d:f6:a8:e8:93:88:
                    00:24:8e:fa:00:d0:3a:ec:7b:92:b2:77:0d:68:20:
                    48:60:0f:7b:89:3e:d6:95:a3:9c:74:4f:0a:7c:8f:
                    ca:dd:83:67:91:f0:f1:78:c8:d9:33:cc:ce:f7:23:
                    04:51:5c:78:bd:08:05:65:f9:41:b0:44:32:c2:da:
                    0b:d1:27:5f:09:49:07:1c:82:2f:d8:a5:4e:73:9e:
                    9a:80:8c:7d:fd:3a:11:fb:a6:9f:0e:1a:41:4e:92:
                    f0:51:40:11:ef:f5:2e:1b:98:d0:f8:7b:51:d3:56:
                    9d:21:5e:93:e1:6f:af:cd:9b:4c:e6:0f:8e:4c:04:
                    c3:c5:7a:78:6a:69:0c:ae:d7:7e:85:6a:12:f5:b4:
                    fc:8d:2f:83:82:fa:88:9b:53:4d:6d:d2:af:cc:d8:
                    8d:bc:f5:a6:13:4b:cf:fe:14:d1:f4:23:6c:e6:87:
                    ea:9d:d6:df:2d:83:ef:98:3c:be:25:dd:dd:7d:3d:
                    f9:26:19:cf:29:da:ab:17:bd:f4:a8:31:4b:e0:2b:
                    dc:a6:e1:ad:23:f6:ae:04:2c:1f:10:d1:87:9c:52:
                    57:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6F:59:F9:49:6B:03:0A:8A:1E:24:B4:54:D1:3C:73:4C:1A:B8:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/0352e3a8-bbe0-3d6c-8444-0e0e4db812d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl

            X509v3 Authority Key Identifier:
                keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.214.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:07:ac:34:03:aa:6e:9a:94:19:18:f2:4f:d4:90:1d:c0:ba:
         34:9f:2a:c5:f8:9a:5d:af:6d:00:b4:37:31:3a:6a:1f:c5:34:
         f1:16:17:d9:4a:f4:dc:27:6a:af:b0:07:4e:99:6d:0b:27:2b:
         87:48:ea:b5:6a:59:53:fb:03:cc:4b:5e:b0:35:74:56:74:09:
         22:69:9e:d1:5b:ea:30:a3:e9:5a:35:36:44:c9:64:54:5f:50:
         42:06:ee:21:30:53:78:d3:c1:e9:81:f4:ff:af:32:b7:d0:51:
         c2:e8:ab:08:78:3e:b0:61:5a:da:2e:84:34:fa:be:d2:e4:0c:
         85:e3:e0:fa:00:20:04:d7:70:6e:f0:bd:94:e0:91:96:24:6e:
         0c:ee:5c:17:96:d9:e2:ce:5a:22:59:29:af:b3:fb:57:fc:c0:
         6c:16:31:8c:c1:e9:d1:53:55:e8:73:07:39:10:23:32:9f:da:
         67:57:b0:82:6c:40:81:3a:88:28:ef:aa:7b:eb:4b:3f:9e:fa:
         f0:89:96:f3:9d:25:5d:da:4c:4d:15:e3:5b:ae:78:e1:c9:7d:
         57:45:c1:a6:b8:64:1a:bc:25:db:2b:58:3d:e7:02:ca:44:0f:
         0f:3b:9d:45:c2:5d:13:b0:ad:4e:fe:06:06:fb:03:d2:d2:5b:
         96:5a:3e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:49 2026 by rpki-client